$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tyN9-ORrdUyUbG7JOedq1yzMMnk.roa File: tyN9-ORrdUyUbG7JOedq1yzMMnk.roa (raw, json) Hash identifier: zmz9J/qAZlrMTqIeTXvTkqA84lwqhrbmFi4kgQbldxM= Subject key identifier: B7:23:7D:F8:E4:6B:75:4C:94:6C:6E:C9:39:E7:6A:D7:2C:CC:32:79 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3381 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tyN9-ORrdUyUbG7JOedq1yzMMnk.roa Signing time: Mon 10 Feb 2025 13:51:29 +0000 ROA not before: Mon 10 Feb 2025 13:51:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 118.232.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 16:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13185 (0x3381) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Feb 10 13:51:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B7237DF8E46B754C946C6EC939E76AD72CCC3279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:98:d4:8a:0e:99:e0:7f:2c:53:0f:23:3a:4f: 4e:3b:6b:79:d6:8e:dd:50:88:79:bb:ba:84:df:78: 17:9e:3c:c3:ad:3e:ec:48:55:8d:05:e6:20:ec:d6: 15:17:0e:84:de:e8:e0:14:f6:db:b7:99:a8:1e:5b: ab:00:22:51:52:0f:6a:c3:23:f9:fa:9d:92:67:4b: e4:35:70:e0:0e:5d:b7:36:01:15:ae:65:7d:21:94: bf:cf:f3:ef:9e:21:34:ad:d4:be:de:f7:50:f3:dc: 06:cf:6e:d9:18:00:23:ed:f9:2d:f4:44:6a:91:95: c1:b9:75:75:3b:50:e3:87:a5:73:57:24:8f:67:5a: 43:64:07:94:3b:82:9d:74:ec:fc:43:61:fd:f4:ed: 3f:16:b9:5a:ef:86:01:25:6d:68:79:4d:f8:c5:eb: 86:92:63:a8:65:d9:14:9e:6a:51:92:78:83:92:c2: 3f:e7:bf:12:eb:36:45:29:70:6b:1b:80:49:b7:f3: 0a:b7:2c:5f:ab:fe:1e:38:e1:ac:8c:9b:28:e0:a6: a3:94:75:5b:12:4e:97:10:98:0e:70:89:04:53:8c: 45:53:97:ec:a6:98:7a:e2:c4:aa:a9:5c:42:14:7f: 98:18:44:ad:5a:98:16:dd:3b:52:bc:8b:b2:98:e6: 46:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:23:7D:F8:E4:6B:75:4C:94:6C:6E:C9:39:E7:6A:D7:2C:CC:32:79 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tyN9-ORrdUyUbG7JOedq1yzMMnk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.152.0/21 Signature Algorithm: sha256WithRSAEncryption 7c:2b:6d:85:3e:d9:46:a8:97:ae:be:8f:ec:3f:09:bb:3f:0f: 41:53:07:2f:39:80:3c:4c:13:52:5f:50:9f:e2:c8:36:5b:d1: 9e:4f:2c:ca:63:13:2a:e8:f6:c5:74:30:aa:97:f5:09:c6:49: 29:da:16:c8:e2:6e:b3:ed:ac:77:0e:61:16:33:0e:5b:0c:29: 58:68:94:19:04:65:1b:e1:be:44:49:94:aa:f4:d7:18:1b:c4: 0f:1f:e9:4a:2c:37:5c:e3:a5:84:69:1a:b1:3e:a0:ab:5d:fd: d4:8c:76:b2:c1:c9:2a:0a:9e:9d:64:ff:7d:56:fb:29:23:89: db:64:65:48:43:a4:d6:de:ed:c1:1b:17:e1:97:a6:48:0f:ac: 14:60:4b:07:45:6f:1a:de:49:0c:d6:d7:ed:fc:71:56:df:dd: 8c:fd:bc:ce:45:cf:17:20:b8:0c:ca:35:29:2d:60:cc:bd:de: 95:9e:6b:4e:56:c4:4d:53:f6:06:06:0a:bd:7e:61:40:c8:d5: ce:bd:bf:a5:6d:18:76:7d:f6:ba:22:6e:ae:f7:5e:b2:93:4e: 39:e9:1d:5a:e1:79:09:2b:ec:d0:36:f8:5e:de:6d:36:d7:22: e9:e7:f4:b0:07:23:07:05:ca:6f:1e:12:04:fb:cf:f9:7e:13: ba:7e:5b:74 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICM4EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx MzUxMjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI3MjM3REY4RTQ2Qjc1 NEM5NDZDNkVDOTM5RTc2QUQ3MkNDQzMyNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3mNSKDpngfyxTDyM6T047a3nWjt1QiHm7uoTfeBeePMOtPuxI VY0F5iDs1hUXDoTe6OAU9tu3mageW6sAIlFSD2rDI/n6nZJnS+Q1cOAOXbc2ARWu ZX0hlL/P8++eITSt1L7e91Dz3AbPbtkYACPt+S30RGqRlcG5dXU7UOOHpXNXJI9n WkNkB5Q7gp107PxDYf307T8WuVrvhgElbWh5TfjF64aSY6hl2RSealGSeIOSwj/n vxLrNkUpcGsbgEm38wq3LF+r/h444ayMmyjgpqOUdVsSTpcQmA5wiQRTjEVTl+ym mHrixKqpXEIUf5gYRK1amBbdO1K8i7KY5katAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtyN9+ORrdUyUbG7JOedq1yzMMnkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3R5TjktT1JyZFV5VWJHN0pP ZWRxMXl6TU1uay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2 6JgwDQYJKoZIhvcNAQELBQADggEBAHwrbYU+2Uaol66+j+w/Cbs/D0FTBy85gDxM E1JfUJ/iyDZb0Z5PLMpjEyro9sV0MKqX9QnGSSnaFsjibrPtrHcOYRYzDlsMKVho lBkEZRvhvkRJlKr01xgbxA8f6UosN1zjpYRpGrE+oKtd/dSMdrLBySoKnp1k/31W +ykjidtkZUhDpNbe7cEbF+GXpkgPrBRgSwdFbxreSQzW1+38cVbf3Yz9vM5Fzxcg uAzKNSktYMy93pWea05WxE1T9gYGCr1+YUDI1c69v6VtGHZ99roibq73XrKTTjnp HVrheQkr7NA2+F7ebTbXIunn9LAHIwcFym8eEgT7z/l+E7p+W3Q= -----END CERTIFICATE-----Generated at Tue Apr 22 14:59:22 2025 by rpki-client